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ABSTRACT 

PURPOSE- To provide an elliptic curve-based public-key enciphering system 
having much enhanced safety by eliminating a limit to the prime factor of a 
parameter . 

CONSTITUTION: An arbitrary prime factor is first selected and an 
enciphering key corresponding to the factor is registered with a public 
file device 10. Then, a decoding key list corresponding to the factor and 
the enciphering key is generated and saved in a decoding device 40, 
together with the factor. Thereafter, an enciphering device 30 receives the 
public-key of a receiver (decoding device) from the public file device 10, 
and performs the multiplication of a plain text on an elliptic curve. Then, 
the device 30 sends the multiplied value as a cryptotext to the decoding 
device 40. This device 40 calculates an elliptic curve parameter from the 
cryptotext and selects such a decoding key as corresponding to the 
parameter, using the decoding key list. Then, the plain text is obtained 
from the multiplied value of the cryptotext on the elliptical curve, using 
a remainder theorem. 
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TOM 



1 

m&m i ] &mm\z «t d 5 u.k©tt«©**fc*R 

^Sct*fL-T^Rft«ay 2 = x 3 +ax (mod n) 

¥Xi4*H«a«AaSft. i¥S*«Hiiy 2 = x 3 
+ ax (mod n) ±TttttH*fcaS^T*J|t-r*«fH 

y 2 = x 3 + ax (mod n) ©/t?^- ?&gtWTZ>i% 
cfcOKtSPJftifgy 2 =x 3 + ax (mod n) ©A5^- 

*c»jfcT«tt#*ftfc*T*ttt#«**#a£. BR* 
*{fcgBa»&ArtSftfctttf***K«Hiiii*y 2 = x 

3 + ax (mod n) ±Ttttt#*e*:Jl>T*»'r*l# 

U WaT**ffllHjfeJ£«»hJ|£¥ai«*tf***Sjfc« 
5*. 

[0 0 0 1] 

ricas-^ < «H*2f5tR a cffl «r» s ft *«&rit« 

[0 0 0 2] 

m&o&ffi] 1 9 9 o^ic»n*i®ica^<^BH©Bt 

# (KMOV^iC) jWtsgaftT^-s. ;®kmovj 
gli/^^-i'n (=pq) OKBft^-ffOSJBdtZSfe 

— ^©ig&p, q#psqs2 (mod 3) Sfc 
tt, p = q = 3 (mod 4) T&ttftt£&£& 1^5 ©J 

[0 0 0 3] 

[«M*»jRftl/J:5i:-r«ll«] tfcfc© 
4i»»«#35rS:Cf4KMOV*a:*ffl^fcarSCKJ:OH|F 

[0 0 0 4] ^fgiWte. ±fE©^C«*«c$ftfct>© 



(2) #i¥6 - 2 8 2 2 2 6 

2 

[0 0 0 5] 

ttWH*»ftT*&ft©#a] B 1 tt**W©KS*JS 

P, qfcMRU Sgfjcp, qK*HfcTS&B*e, n£ 
SMl-rsaBl^r-f^ftBl Ot, sfi&p, qfc»UT 
flfRttlSEp (0, b) :y 2 =x 3 +b p (mod 
/0 p) , E q (0, b) : y 2 =x 3 +b q (mod q) © 
tfc*b p . b q ,t/l7^-^bi©W^1-|lWt 

*8fcp. q£<fc*«£j*#R2 lfc,fc?>£j«aftfc 

<k£-&£r&£/i£gB2 0 t. ¥:*M£3m#©&0Mi 
e, n#A7j£ft> ¥SM^HftiE„ (0, 
b M ) : y 2 =x 3 +b M (mod n) ±T&IHi& e 

tJv»T*jr-r*«pj***iic*a3 i Bt^x* 
i&ofctsi&p, qi«***«*Eit-raeit#a4 i 

£. BWftSfi 3 0 ii» 6©*f XC p , QjfeS* 

Rtti&Ep (0, b p ) :y 2 =x 3 +b p (mod 
p) , E q (0, b q ) : y 2 =x 3 +b q (modq) 
OA7/-^b p , bq Stf#T*«*ffl-ll£¥a"4 2 
Ett*ft4 1 CE*SnTH««# t*J:0«Ra 

i©A5>-^i:#j6t«afidp , d q e*sR-r« 

JC^inftiEp (0, bp ) , E q (0, bq ) ± 

30 -c«#«dp , dq »ca^^r*jr-r*«infti»*ff# 

R4 5<»:, «IRtt*§i!ll*#R4 5K«fcO*»6ftfcltM 
p , Mq-k, SlScp, q^e. s PXM^'4'ffl*J^aica 

o*^T«-»L(±i73-r-5*H*j^^afh«t#a4 6 tst 

[0 0 0 6] 

HtUB] 5Gl-k©tt*©*Scp. qW, 

P. qKttJSLfcWF^fbfce, n r-f )V&W 1 

0CB»U p, q, efc#j£:T*tt*HME*£j*U 

**P, qt*lC«^SI«^«^BtC|EtSLT*5<o- 
40 i£f§# <«HJ{t*fi) ttM7 7-f ;Ugfi 1 OiDSfl 

# <*<*8«) O^MSie, n£A^U ¥£M = (m 
x , m y ) SrffiRfti^En (0, b M ) : y 2 =x 3 + 
b M (mod n) ±7?e«UfcjftCC*Baf^XCiUTSfll 

* (8H*«b> KSMrr*. s§t (fk^SB) taw** 

XC^e.*! RttifiEp (0, b p ) :y 2 =x 3 +b p 
(mod p), E q (0, bq) :y 2 s x 3 +b q (mo 
d q) C0A7^-^bp , b q &W-»U 
UTA5^-^b p , b q £ff-ffU St^SBfflT^ft 
IBte^ftT^*^^®«€rffl^T/t5^-^ bp , b q 
50 ICM*Tatt^«d p , d q £j§tf. WF#3tC«»Hffl 
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^Tdp , d q f»Lfc^Mp , M q £fr*>tpmm&fem 
xm&toM&KMovtt&QbmmttQ* &&&& 

Bf< ft: -5. 
[0 0 0 7] 

[0008] m2te*5t.m(D— $&mm£>i/XTj±ffii8.z 

'Affl7T-1JmWl 0. ^Bfi&e, nRi;, 
dp , d q «±|tt«ff±ri(SI2 0. A2»£*lfc¥:£ 
M*^M7r-f;USBl 0*»6<04^BH«e. nK«fcD¥ 
*MSWMM:U HXCSML. fflfl-rsHMWfc* 
130i, «#<tSf 3 0i)>6A*4n&WXC** 

[0 0 0 9] £t~F. *Sfi««BHiliT*fc:»fcD, #f£UH 

[ooio] if, flmttiiKH'rse^wttiiiis-r 

y 2 =x 3 + a x + b (mod p ) 

E n (a, b) *»WO*«5«Trtt/X?^ — ^ 

a*** (a = 0) ©tintti^En (0, b) 
[0 0 1 1] BTFC*fEW<0— *Jt09©fcgfiK:^>T 

i. 'am^t^ )imw 

£Ub©ftS©*»Cp. qfl«»*!3*u CCStCML 
fc«F*tftJi (ftfflfc) e, n#<fiflkStl«. 

[0 0 12] 2. &£fi£!gB 

HKjftT«^£j«S« 2 4 tt, *t&£>*gg 241, ft 
&*?±/*3£tt 2 4 2, 2 4 3 Rtf tt4Ht*£j£&B 2 4 
4**S«WE3nS. *ft£j$8 2 4 1 fiHMk p . q££ 
J*U *Scp«ttft££/*£B2 4 2 K. ?Si&q£<£& 
S^fiKSIB 2 4 3 CA*t*. 
[0 0 13] (1) 

"T, #ffijR3S^«K%B 2 4 2 . 2 4 3 tt, iil&^jS 

I4M12 4 2I1 *SpC*fLT«Htt« 
E p (0, b) :y 2 s x 3 +b (mod p) 
©tt*£/t5*— * b £©H««STB{»H 1 £tt*©a* 

p = 2 (mod 3 ) 
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[0 0 14] 

can 



BBS!!? 
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P+l 



[0 0 15] ifti. ttfSg^8fi2 4 2tt, COfi 

fta«fK^tta^tltEB2 4 5 ica*rr«. 
[0 0 16] Sfc. ttS:S£AS!B2 4 3tt*ftqi:» 

70 E q (0, b) :y 2 s x 3 +b (mod q ) 

©ttffc£/t5.*-* b fc©W«fcj5VrW»J^ £&*©** 

q = 2 (mod 3 ) 

[0 0 17] 
[*2] 
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q+ 1 



20 [0 0 1 8] tttD, ifc**£|*SB2 4 3tt£©tt* 

m.&'&nm£.f8.mm. 245 cm^ts. 

[0 0 19] CCT, ffift«£j££B2 4 2, 2 4 3B 

p = 7T7r' 7r = 2 (mod 3) 

*SSfc-r-^#Z [co] ±<nm®i 
k = a — 0 a> 

'(Dm, &$C*£/£gfi 2 4 2 , 2 4 3U« 

[0 0 2 0] 
U*3J 
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N P0 =P+ 1 + (2 a + £) 


- 1 


N»i = p+ 1 - (2 a+j8) 




N P2 =P+ 1 + 


-co 2 


Np 3 =p+ i - (£-a) 


CO 


Np 4 =p+ 1 - (a+ 2 £) 


-G) 


N P6 =p+ 1 + (a+2£) 



[0 0 2 1] {4&*£fijigB2 4 2, 2 4 3tt, COfi 

[0 0 2 2] ( 2 ) «4|fta£j££B 

**H8*£rit£fi2 4 5tt, 2^>©J!i&p, q<h 

[0 0 2 3] H4«*fEWeo— mfi«lW»^SBOtg 

so ^««£j«*B*ttWT«;fcie>©H-c»«. f*^**£ 
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m±i&mm 1 ~ 3 zm^tinz. 

[0 0 2 4] ST. p . q 

p = q = 2 (mod 3 ) 

[0 0 2 5] i¥L<«. «#&£f£=gfi 1 tt. Xflt. L 



mm* 




* 


d po 



[0 0 2 7] fib. £*ie><Z>^i:::fc^T. feW 

ft«e, n mar*. 

[0 0 2 8] JfcC, ijf&p, q#», 

p = 1 (mod 3 ) , q s 2 (mod 3 ) 

[0 0 2 9] IfKIl, Sfi^Sf 2H A2)£L 

gcd (e, N P o) =gcd (e, N P o) 



mm* 




i 


d »o 


- 1 


d oi 


CO 2 


d p2 


-a* 


d P 3 


CO 


d p4 


-co 


d pc 
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gcd (e, p+1) =gcd (e, q+1) =1 

fcfcsttHfces^^AiaRjrr*. fit, jut© 

e • d P o= 1 (mod p) , e • d q o= 1 (mod 
q) . 

cruet o, i a*tua-r-&tt*Mtefctt, 

[0 0 2 6] 
[£4] 







* 


d q0 



= gcd (e, N P i) 
= g c d ( e , N P 2> 
= gcd ( e , N P 3> 
= (e, q+1) 
= 1 

20 ttt*4ilMieS5>^AKR3tr*. fit, &L~F<D 

^mrzrm^md P i 0=0-3) , d Q0 *ii-*-r 

[0030] e-d pi =l (mod p ) ( i = 0 — 3 ) , 
e • d q o= 1 (mod q) . 

[0 0 3 1] 
»5] 



m%\\* 




* 





[0 0 3 2] tf-So fiU Cine>W^lC*3ViT, fe» 

[0 0 3 3] £6(C. 5fl2&p, q*i 
p = q = 1 (mod 3 ) 

ttStf. ifMHm£j££B3lc*ftp, q<t-?-n?>©<4 
»*«A*U $#IiMglS2 4 5©tH*JfcU *L 
3**7?-*. 



[0 0 3 4] S¥L<tt. tt4tt&J$gB 3 I*. A^£L 

gcd (e, N P i) =gcd (e, N p j) 
= 1 ( i = 0~3) 

[0035] e-d P i=l (mod p) 
SO e • dqjs l (mod q) (i=0~3). 
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[0 0 3 6] 







i 




- 1 


dp] 


CO 2 


d p2 


-O) 2 


d ps 


(o 


d P 4 


- CO 


d P fi 



[0 0 3 7] fib, cn^cD^^fetiT. 

[0038] z.ti\z*D9m*aniL&m3\*mm£n 

si4 o icm^-r^o 
[0039] ( 3 ) mmmm 

#fcSI3 0tttlHi»E n (0, b M ) -hfcfc^TA 

3 i *#-r*. 

[0 0 4 0] l**WtSB3 0tt, A^JtLt. 2tMtt 
e, ni:5f^:M= (m x , m y ) #t-«j-;LSn£. fib, 
0 <m x , m y <n and gcd(m x ,n)=g 
c d (m y , n ) = 1 

[0 0 4 1] «F#fl:*«3 Ott, *»PJ*«SE n (0, b 
M ) : y 2 =x 3 + b|| (mod n) Jit?, 
e • m over E n (0 , bM ) 

[0 0 4 2] (4) 

m6\z*&W(D-mffim<D&nmm<Dmi$.&*?. mm 

Kfel^T, IfS14 Ott, ^&PiatS6P4 10, $a 
qlBttSP4 11. SBl. I2©«»ttgS4 2 0.4 2 
1 , JB 1 . 115 2 ©BiHUT ftSES§ 4 3 0, 4 3 1, 
^§§4 4 0, 4 4 1, SBl. S8 2©«rRffl*§i»»8g4 
5 0. 4 5 1. pO>tt#ft&fE1ftffi4 7 0. q »«*tf£ 
Gttff4 7 l&tf*S*l*£9*|-)|£S4 6 0cfc0*fi)c^ 

ns. 

[0 0 4 3] t^8I4 O0>*&peifctf 4 1 0 ttfflifc 
P?rEtibT*3#, *ftqGttflU 1 1 ttsiiSSc q £fBt& 
bT*5<„ 

[0 0 4 4] Sf5l<7){SSScff-3Sgg4 2 Ott. RH»fl:StB3 
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d ,o 


- 1 


d oi 




d Q2 


-co 2 


d q 3 


0) 


d Q* 


-co 


d aS 



Ep (0, bp) : y 2 =x 3 + b p (mod p) 
<T>n?* — 9 bp £H-»T£. 

[0045] )B2®fMfcti-*84 2 ltt. t&mtmma 

E q (0, bq) :y 2 =x 3 +b q (mod q) 
05/^* — *bq sthff-r*. 

[0046] rnKDrnm^-mwrnA 3 o«. tiRtt^© 
A-^-^bp ^ftp^amsij^rp 

[0 0 4 7] SS2<©!&8iJ^H-|?§§4 3 ltt. «IRl8l*£© 
A'^^-^bq tJMfcqjfcSWiiJ^rq £fj-3¥T<5. 

[0 0 4 8] pW«#il^iE1*»4 7 Ott, $tpO| 
#«*«e«U a©tt#««SB«au 7 itt**a© 

[0 0 4 9] Jg^fi&lfsgg 4 4 0 tt p <Z>tg^&3tfE«g|5 
4 7 0^6©«#«*iJBl©il»J : ?fHIC»4 3 0^6 

[0 0 5 0] «^«&S?t3g 4 4 1 ttf&S'J^ q IfiXfj £ n 
Si. SKSlgiJ^Tq K.fcO«4H»S**U 

d q *St#-T-5c 

[0 0 5 1] ^l«3tlRffli^^#gP4 5 Ott, Bgr^ftg 
S3 0*SA*3ftfc«F*S:CfcHIRiaiiEp (0, b 
40 p ) ±Td p iLT, ^»$tlfciiS^M p ^tb^TS. 
[0 0 5 2] SfS2©«iRft*g*lfLg|U 5 ltt. SMMfciS 

«3 o*»6A**nfc«f**s:cfe«intt*Eq (0, b 

Q ) ±Td q «LT, *SattfclS*Mq £UJ*J-rs. 
[0 0 5 3] *Wm&&m.Wc*m4 6 0tt^^pfE*g5 
4 1 0*»e.<O*S!cp tSSScqiBtSaiU 1 l*^C03j8jBtq 
Rftiii**§§4 5 0. S2«5ltRl®ffg 

[0 0 5 4] BKI1 fi#814 0tt. A^JiLT. 
50 Bt^<t^B3 0^e>Bt#SCC= (c x . c y ) tfi^-TL^ 
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n. SB 1 RtfSFS 2 ©^SScffrffgf 4 2 0. 4 2 1 TH A 

bp = c y 2 - Cj 3 mod p, 
b q = c y 2 - c x 3 mod q 

[0 0 5 5] IS 1 -&JS% 2 ©iSl8iJTiH?I§ 4 3 0. 4 3 
1H #/^/-^b p , b q «-^©cfEtftgP 4 1 

o. 4 1 1 a»e>*§e>ftfcj&&KJ: o P s q = 2 

(mod 3) T*fttf. ^pIC^T^aSUT* r*j , 
sJt&qKfcfTSiigiJ^ft r*j tTSo psl 

(mod 3) , q = 2 (mod 3) &<~>H iitgc p fCft-f -5 
m^Tp ft. 

[0 0 5 6] 




©«■**!*£ u *»qK:*rr*aifc»j^ r q *. 

[0 0 5 7] 
[*2] 




[0 0 5 8] tu #*©ttJMS*ft*ScpK:*rrsMl 

SU^rp . ^qlrM-r-5ia^ r Q £TS. 

gsi§4 4 0, 44 111 p, Q««-^»^iESSB4 7 

0. 4 7 l^Sa^tt^ftiW'J^rp . r q CtOKBU 

U «^®d p , d q ft&«. Jfcfc. !¥§ l»ffiP3fi«S^ 

3fg§4 5 0, 4 5 111 ffiH&m 

E p (0, bp ) : y 2 =x 3 + bp (mod p) 

E q (0, b q ) : y 2 =x 3 + b q (mod q) 

dp • C over E D (0, bp ) , 

d q • C over E q (0 , b q ) 

£fr3SU. ft*0M-*H«€Mp . M q <fcT-2>. Hftfc 

±0, 4>ii^lfr»l?4 6 0 Btf MJ^l^fflU 

TM P , M q «tO¥XM^trIL. f jMilTffl^t 

•5. 

[0 0 5 9] fc43, ±IE5l]S6^J©4 , ©BaWTfflO»e)tlT 
USSiStp, qOfifScH -?-©fBn (=pq) ©JflBSc 
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[0 0 6 0] 

KO, *0CP, qCD*«S*Hi;CLftftl:. KM 

[0ffl©ffi*&i&W] 

[Si] #fgiw©lipi3*j£0-r<&5. 

[0 2] *JB«©->XxAfll|jEia-r*-S. 
/0 CE3] *RI1II©— &ttOT©ft£j$gft©#MHT& 

-5. 

[0 4] aMSHO— £ffiOT0tt#ft&£jft£B&ftift-r 

■5fcs6©0T&-5„ 

[0 5] §IM#J©B&^{tSfi©*Ji£0T& 
*. 

[0 6] *5EM©— *lfi«l©tt^S«©#|jacHr**. 

1, 2, 3 

10 tol^r-f^Si 
20 2 0 ii£>&gfi 

2 1 {£g(r.&£j£3M» 

2 4 tt#«£ia*& 

3 o mmmm 
31,45 Mmmmmt^st 

4 0 tt^SB 
4 1 Ett^S: 

4 2 mmmw^m 

4 3 gWM^ ffMSt^S 
4 4 tt*MMft»^gt 

50 4 6 'pmm&fewitw^m 

2 4 1 5g|Sc£jiJc§g 

2 4 2, 2 4 3 ttftX£j£gB 

2 4 5 «^8t3l£/*g« 

410 Sg&pEI&gB 

4 1 1 XftqCttffi 

4 2 0 % 1 ©^SfcffrffH 
4 2 1 SB 2 ©«&fr*§g 

430 « 1 ©^su^m-wgg 

43 1 Sg2©!i55iJ^W-»g§ 
40 4 4 0,4 4 1 tt^^tfcsitSg 

450 m i (Dttm&mmmm 

4 5 1 Jg2©ttP]ft*SlH8 

4 6 0 f HSJ^stt-^gg 
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6-282226 
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£§381 e, n 
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[0 2] 
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10 



e, n 
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e, n 
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20 



30 
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fete 

— ► ¥£M 



40 
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